Re: Effective Rights

From: Pat (htech_at_hotmail.com)
Date: 01/30/04 

Date: Fri, 30 Jan 2004 11:20:23 -0500

thanks for the response Keith
On Fri, 30 Jan 2004 11:06:00 -0500, "Keith W. McCammon" <km@km.com>
wrote:

>Do you want to determine rights for a user, or for a computer? You need to
>make that determination first.
>
>There are a few resource kit tools that allow you to view group membership
>and group policy results:
>
>global.exe
>gpresult.exe
>perms.exe
>
>Some of this can also be done with cacls and xcacls.
>
>"Pat" <htech@hotmail.com> wrote in message
>news:khrk105elqnqma6tspt3t26bt7uih58ak6@4ax.com...
>> is there a command line option to run on a user workstation to find
>> out thier effective rights on our domain?
>

Relevant Pages

  • Re: Effective Rights
    ... Do you want to determine rights for a user, ... make that determination first. ... There are a few resource kit tools that allow you to view group membership ...
    (microsoft.public.win2000.security)
  • Re: Administrators vs Debugger Users
    ... Group Policy Restricted Groups is causing the group membership to change. ... There is no default group called "Debugger Users" group in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Manual Update Group Policy on Windows 2000 Server
    ... The machines don't have the group membership in their ... session token and this is necessary to access thte GPO. ... > a Group Policy named GP1 associated with a container in Active ... > I've added several servers to the group which makes the group policy ...
    (microsoft.public.win2000.group_policy)
  • Re: Viewing Active Directory Users and Computers
    ... Use Group Policy, User Configuration, to restrict Microsoft Management ... A user downloaded the adminpak and can view Active Directory Users and ... Computers and group membership etc. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Create User who can only query LDAP
    ... Well you could create a regular user and apply group policy to all of your ... computers that specifically denies it (through group membership) the right to ... login locally, through TS, and as a service. ...
    (microsoft.public.windows.server.active_directory)